Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
File:                     oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft (raw, json)
Hash identifier:          bDGZ7XcZoCZSWezH46Uvq9it8bUEMH6JxsH/qBM/ohQ=
Subject key identifier:   0C:B5:20:69:49:0A:B6:6C:07:7B:1D:BB:EF:C4:9C:32:7E:17:FF:D0
Authority key identifier: A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
Certificate issuer:       /CN=a018d68115dc4b730f157906b04426e599b3a8ca
Certificate serial:       019F94A518C5EEB7D5B24ED6D7ADF4C71356
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
Manifest number:          0F91
Signing time:             Fri 24 Jul 2026 15:01:15 +0000
Manifest this update:     Fri 24 Jul 2026 15:01:15 +0000
Manifest next update:     Sat 25 Jul 2026 15:01:15 +0000
Files and hashes:         1: YNzgRRzWdr4v8acL2_mrerBZEBY.roa (hash: 0vVcOkUILWsiRv1XZ/svhufbrbQADvOSN3QtFvRS5U8=)
                          2: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl (hash: TaghuttRhR5SIweJkF/ad5cPHvVGtK6Ezp1ly6Vw0c4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:a5:18:c5:ee:b7:d5:b2:4e:d6:d7:ad:f4:c7:13:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a018d68115dc4b730f157906b04426e599b3a8ca
        Validity
            Not Before: Jul 24 15:01:15 2026 GMT
            Not After : Jul 25 15:01:15 2026 GMT
        Subject: CN=0cb52069490ab66c077b1dbbefc49c327e17ffd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:11:ad:6d:3c:8d:a7:e7:df:84:54:e6:b8:4a:
                    9b:e9:f0:2b:94:9c:db:41:db:18:ae:82:d9:ba:37:
                    ae:da:0b:ef:99:84:48:28:90:ca:ca:26:f7:71:49:
                    3a:32:a9:ed:2e:be:5e:a0:ba:e1:7e:57:9c:fa:50:
                    5c:35:c9:a9:36:e1:77:5a:aa:d3:b2:28:59:c2:66:
                    ce:57:cd:26:b2:12:fb:9b:cc:1d:a5:63:69:75:2c:
                    ba:5f:ac:71:c9:de:34:6a:7f:81:fa:f4:59:1d:4c:
                    d9:a3:07:e0:a5:0f:69:03:d2:8e:d5:b4:3f:a7:3d:
                    72:cc:75:4c:d4:f8:f5:a5:1e:de:41:bc:5e:5c:b4:
                    1d:ae:78:cb:21:88:d8:c9:e3:4e:fb:53:5b:8e:62:
                    02:10:45:9b:ed:23:70:20:25:89:14:26:d5:b6:a1:
                    10:c9:cd:8c:fe:a1:67:4b:73:3d:86:00:ac:f9:c4:
                    e4:6e:b7:fd:63:67:ec:21:d8:ff:a8:93:f7:27:3d:
                    3c:d2:0c:0d:61:e6:b1:40:fa:12:20:35:f0:11:b6:
                    c7:22:71:c9:be:e2:3c:83:c8:4a:b8:46:ff:54:35:
                    9c:59:9c:fa:7f:99:d4:9f:10:92:e4:77:bc:5a:fe:
                    8a:2d:b9:db:2c:85:16:41:e2:3b:3a:3a:f3:89:9a:
                    f3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B5:20:69:49:0A:B6:6C:07:7B:1D:BB:EF:C4:9C:32:7E:17:FF:D0
            X509v3 Authority Key Identifier:
                keyid:A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:e7:fd:23:b7:e6:f5:2b:70:cb:bc:2c:05:e6:41:43:a0:24:
         d1:63:cf:4c:e5:b7:7b:76:35:c3:d8:1b:be:1c:8a:b0:4a:e8:
         6c:1e:5e:f7:1f:40:50:bb:ea:b6:09:53:9f:8e:1a:7c:66:39:
         d4:90:8f:15:e5:53:47:46:15:e1:3a:26:0f:05:d2:c8:2a:95:
         17:b9:68:f5:33:11:a7:94:c9:10:40:91:7d:f6:82:58:17:7d:
         35:82:86:96:f3:c2:59:d2:99:d0:18:ce:3d:6a:51:5b:4a:b9:
         87:c5:cb:fc:09:59:96:7a:dd:e8:c6:79:45:11:83:7a:63:14:
         bb:e2:2f:e1:29:07:e1:23:09:de:d8:f5:e0:d4:8e:c2:eb:44:
         17:06:98:3e:ce:aa:e5:c6:09:85:da:84:21:81:9c:22:8e:20:
         91:de:bb:a7:8e:5d:39:07:49:bf:0c:61:7d:5a:25:45:c7:c0:
         8e:88:d6:e6:da:7f:b2:b4:3e:46:92:00:91:02:35:e2:1b:3a:
         9a:4d:db:05:89:f5:2f:1f:1e:f1:7b:c9:a1:cb:c8:15:17:c1:
         d4:04:7c:8d:76:be:2b:46:34:a3:50:1b:cd:2d:7d:36:3a:73:
         bc:ad:3f:57:1c:42:06:2a:24:e8:3a:38:00:14:5a:e4:5f:e0:
         a5:04:4c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:02 2026 by rpki-client